Forum Discussion
Stephane_Vidal_
Nimbostratus
Nimbostratusmonitor web proxy
Hi,
I am currently monitoring 2 web proxys using LTM using tcp/8080.
Best would be to http get www.hp.com for instance using individual proxy ips and associated NTLM credentials from LTM.
Do you know how can I achieve that?
Thanks for your contribution.
Stephane
2 Replies
hoolioCirrostratus
Hi Stephane,
You could configure a standard HTTP monitor to send a single HTTP request to the pool members. If the server response contains the receive string, it will be marked up in the pool.
I believe that NTLM authentication requires multiple request/response loops so I don't think you could use NTLM with a standard HTTP monitor. Here is a related post (Click here).
Does the proxy support any other authentication methods? If so, you could configure an HTTP monitor to do this health checking. You can get example monitor send strings in the LTM config guide for your version (Click here), in the Monitoring forum (Click here) or in the Monitoring Codeshare (Click here).
Aaron- PinkieCom
I spent a long time trying to work out why the standard HTTP monitors didn't work for this.
 
It is because the HTTP monitor relies on receiving a "401 Authenticate" message from the initial BASIC auth request to kick in the NTLM negotiation.
 
Because proxies respond with a "407 Proxy Authenticate" instead of a 401, the monitor doesn't work.
 
So I wrote the following external monitor: https://devcentral.f5.com/s/articles/ntlm-authenticated-proxy-external-monitor-1013
 
